Home

Sensor Network Configuration

The sensor is pre-configured with the Qualys URL and the subscription details it needs to communicate to. In order for the sensor to communicate to Qualys, the network configuration and firewall need to provide accessibility to Qualys domain over port 443.

After the Sensor is successfully installed, it is listed under Configurations > Sensors where you can see its version, status, and many more details.

1. Quick Filters

This section consists of the following sections.

• Total Sensors - This tile shows the total number of sensors created by you.
• VERSION - Gives you a list of total sensor versions present in your account.
  To know about current versions and features of various Qualys Container Security sensors, refer to CS Sensors Release Notes.
• TYPE - Indicates types of sensors in your account along with their total count.

2. List Section

This section lists all images in your environment along with their details.

Column Name	Description
SENSOR	Shows sensor details such as sensor ID, type, and creation date.
TYPE	Shows sensor type.
ASSIGNED PROFILE	Shows sensor profile assigned to the sensor.
STATUS	Specify if the sensor is, Running: Indicates that the sensor is running. NEEDS_UPDATE: Indicates that the sensor is outdated and needs to be updated. Unknown: Indicates that the sensor has not communicated with Qualys for more than 1 hour.
ARCHITECTURE	Shows name of the host architecture.
VERSION	Shows sensor version. This will help you identify if the sensor needs an update.
HOST	Shows the details of the host on which the sensor is installed. The detail could be the IP address or the name of that host.
TAGS	Shows tags assigned to the sensor.

3. Quick Actions

Select a sensor from the list and click Actions to open the Quick Actions menu. The following options are available.

• View Details - Opens the sensor details panel with tabs for Host Summary, Sensor Details, Cloud Metadata, Activities, and Sensor Logs.
• View Host Details - Opens the host asset details in the Asset Inventory.
• View Profile Details - Opens the sensor profile assigned to this sensor.
• Delete - Deletes the sensor from your account.
• Assign Sensor to Profile - Assigns the sensor to a sensor profile.
• Remove Sensor from Profile - Removes the sensor from its currently assigned profile.

View Details

When you select View Details from the Quick Actions menu, a side panel opens with the following tabs.

Host Summary

Shows information about the host on which the sensor is installed.

Field	Description
Basic Details
DNS Hostname	DNS hostname of the host.
FQDN	Fully qualified domain name of the host.
NetBIOS Name	NetBIOS name of the host.
IPv4 Address	IPv4 address of the host.
IPv6 Address	IPv6 address of the host, if available.
Asset ID	Unique identifier for the host asset in Qualys.
Host ID	Qualys host ID assigned to the host.
Activity
Last User Login	Date and time of the last user login on the host.
Last System Boot	Date and time of the last system boot.
Created On	Date and time when the host was added to Qualys.
Last Checked-In	Date and time when the sensor last checked in with Qualys.
Last Activity	Date and time of the last recorded activity for this sensor.

Sensor Details

Shows identification and runtime information for the sensor.

Field	Description
Identification
Name	Name of the sensor container.
Sensor UUID	Unique identifier for this sensor instance.
Version	Sensor version currently installed.
Image Id (SHA)	SHA digest of the sensor container image.
Privileged	Indicates whether the sensor is running in privileged mode.
Container Id	Runtime container ID assigned by the container runtime.
Activity Status	Current provisioning or activity status of the sensor (for example, Provisioned).
Container Runtime	Container runtime used by the sensor host (for example, DOCKER).
Container Runtime Version	Version of the container runtime.
Architecture	CPU architecture of the sensor host (for example, x86_64).
Instance ID	Cloud instance ID of the host where the sensor is running.
Container Labels
Lists all container labels applied to the sensor container as key-value pairs. Common labels include name, build-date, VersionInfo, vendor, and maintainer.

Cloud Metadata

Shows cloud provider metadata for the host instance. The fields shown depend on the cloud provider.

Field	Description
EC2 Instance Information (AWS)
Provider	Cloud provider (for example, AWS).
Instance ID	EC2 instance ID.
Local Hostname	Internal hostname assigned by the cloud provider.
Public Hostname	Public DNS hostname of the instance.
Local IPv4	Private IPv4 address of the instance.
Local IPv6	Private IPv6 address of the instance, if available.
Public IPv4	Public IPv4 address of the instance.
Network
VPC ID	ID of the VPC in which the instance is running.
Subnet ID	ID of the subnet within the VPC.
Security Group IDs	IDs of the security groups associated with the instance.
Security Groups	Names of the security groups associated with the instance.
Account & Location
Availability Zone	Availability zone where the instance is deployed.
Region	Cloud region where the instance is deployed.
Account ID	Cloud account ID that owns the instance.

Activities

Tracks all key operations, issues, and notifications for this sensor. You can search for specific activities and filter by time range. The list includes the following details.

Column	Description
Message	Description of the activity or event.
Type	Category or type of activity.
Code	Activity or error code associated with the event.
Occurred At	Date and time when the activity occurred.

Sensor Logs

Allows you to request and download diagnostic logs directly from the sensor. Click Request Log to initiate a log request. Once generated, the log is listed with the following details.

Column	Description
Log Created By	Name of the user who requested the log.
Paths Included	File paths included in the log bundle.
Status	Current status of the log request (for example, In Progress, Ready).
Action	Action available for the log, such as downloading the generated log file.